Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e35f990-f47f-4b4a-8d30-e7c6344b27f5.roa
File:                     8e35f990-f47f-4b4a-8d30-e7c6344b27f5.roa (raw, json)
Hash identifier:          ntjuds9KsCUrt3S/1a/LSmhxr+zNgPLBIKK2WzBr/PQ=
Subject key identifier:   DF:C7:56:55:64:CD:DA:60:67:44:B8:D7:FC:30:9E:20:62:F8:0F:CF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2425A53EF9E704EF89B4CFC19774E512BFE6F6B3
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e35f990-f47f-4b4a-8d30-e7c6344b27f5.roa
Signing time:             Mon 16 Sep 2024 00:00:00 +0000
ROA not before:           Mon 16 Sep 2024 00:00:00 +0000
ROA not after:            Mon 21 Oct 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:a5:3e:f9:e7:04:ef:89:b4:cf:c1:97:74:e5:12:bf:e6:f6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 16 00:00:00 2024 GMT
            Not After : Oct 21 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:e6:51:68:18:1b:b4:1f:64:ae:44:31:27:
                    b7:49:69:f6:e4:48:00:61:06:9e:14:6b:ef:29:7c:
                    94:f2:85:de:d5:1f:76:e5:40:b5:9f:02:90:94:ad:
                    6c:7e:33:55:53:a6:0d:b8:c3:35:5e:9d:b5:96:5e:
                    b2:e2:ca:8f:be:da:22:f9:c1:5c:13:14:5c:ec:95:
                    bd:b4:41:58:47:44:3e:d4:ff:b4:00:bf:0f:f4:0b:
                    a3:eb:de:c2:45:cf:1d:32:6a:c4:eb:38:d9:b8:91:
                    b1:f3:64:d8:e5:4a:89:9a:51:75:c6:c0:6a:5e:64:
                    6b:a2:26:06:fc:e0:e3:46:f1:c8:27:8f:25:ad:66:
                    81:f4:89:e4:65:35:a6:7c:39:34:2f:df:58:2c:28:
                    b4:27:db:c5:03:9e:aa:b5:eb:54:e3:b6:16:63:55:
                    ea:56:73:17:67:9e:34:7d:cd:94:31:9a:03:ba:28:
                    f3:9c:70:8a:9d:90:f6:1d:82:b6:b1:e2:4c:5f:d3:
                    dc:7f:bd:58:09:2c:0b:5e:ac:e2:c4:a8:c8:e7:9a:
                    aa:bb:97:db:ee:0f:4e:f1:ec:f2:2f:d8:93:10:72:
                    cb:6b:80:5d:a6:08:11:d8:d4:a8:3c:6c:9e:6f:e9:
                    2f:64:29:27:0e:c7:dc:8b:43:1d:0c:2a:b2:08:93:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C7:56:55:64:CD:DA:60:67:44:B8:D7:FC:30:9E:20:62:F8:0F:CF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8e35f990-f47f-4b4a-8d30-e7c6344b27f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:11:79:74:b7:76:6f:de:5a:1d:22:c9:fa:82:c6:50:b1:
         c2:5b:ee:91:4e:ba:84:bd:32:d9:71:a6:55:53:9b:cc:0e:99:
         28:22:ce:2e:ea:6e:b0:df:24:e7:17:da:b3:1f:88:71:89:b6:
         0e:2a:c5:f4:73:0d:19:20:1b:94:38:5b:9c:00:e9:4b:ee:d9:
         f4:31:1d:5b:60:02:69:91:c9:80:60:ab:25:52:78:45:d0:3a:
         5e:91:2f:d7:d8:23:cf:01:9f:d4:80:db:61:ae:8f:73:ca:19:
         82:3e:bd:22:72:a5:c4:6f:68:58:08:21:55:06:7d:83:88:2b:
         d6:8a:e9:b1:a8:c8:0d:77:4d:c2:35:48:7e:9c:4a:f8:90:d7:
         4b:50:83:cf:55:81:a0:df:fd:d0:89:f0:b2:ef:61:d5:90:cc:
         a0:29:37:33:ef:92:41:ec:59:5b:ca:bd:bb:08:1d:7e:d4:62:
         96:49:b4:93:d9:f2:1c:7c:5a:4f:36:08:cc:58:a7:40:30:9f:
         3b:a2:d8:12:01:bb:61:a6:53:da:d9:d9:17:c5:6c:e5:1d:97:
         21:f6:58:62:11:f2:96:f7:9d:7b:b3:57:79:0e:53:8b:53:91:
         30:dd:15:4f:46:0e:20:27:bd:35:34:c4:50:fd:44:70:bf:8a:
         3f:8f:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----